@contentful Mcp-tools vulnerabilities

• @contentful mcp-server, mcp-tools, contentful contentful-mcp-server +2 more Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint CVE-2026-53957 Fix available 7.7 HighAugust 19, 2026